hzyz Privacy Policy — Your Data, Your Rights

1 Introduction

Welcome to the hzyz Privacy Policy. hzyz ("we", "us", "the Platform") is committed to protecting the personal information of every player who registers and plays on the hzyz platform. This Privacy Policy describes how we collect, use, store, and share your personal data when you access hzyz services, including through the website at hzyz.app and the hzyz mobile app.

By creating an account on hzyz, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described here. If you do not agree with any part of this policy, please do not register or continue using the hzyz platform.

2 Data We Collect

hzyz collects personal data in three main ways: information you provide directly, information generated by your use of the platform, and information received from third-party payment providers. Here is a breakdown of each category:

3 How We Use Your Data

hzyz uses the personal data we collect for specific, legitimate purposes. We do not use your data for anything beyond what is described in this Privacy Policy without first obtaining your explicit consent.

• Account management: To create, maintain, and secure your hzyz account, including identity verification and password recovery.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, and Rocket, and to maintain accurate transaction records.
• Fraud prevention and security: To detect and prevent fraudulent activity, money laundering, and unauthorised account access. This includes monitoring unusual login patterns and transaction behaviour.
• Regulatory compliance: To meet our obligations under applicable anti-money laundering (AML) and Know Your Customer (KYC) regulations.
• Customer support: To respond to your queries, resolve disputes, and improve the quality of our support service.
• Platform improvement: To analyse usage patterns and technical performance data so we can improve the hzyz platform, fix bugs, and develop new features.
• Responsible gaming: To monitor gaming behaviour and identify players who may benefit from responsible gaming tools such as deposit limits or self-exclusion.
• Marketing communications: To send you promotional offers and platform updates, but only if you have opted in to receive such communications. You can opt out at any time.

4 Legal Basis for Processing

Every time hzyz processes your personal data, we do so on one of the following legal grounds:

• Contractual necessity: Processing is required to fulfil our obligations under the account agreement with you — for example, processing your withdrawal or verifying your identity.
• Legal obligation: Processing is required to comply with applicable laws and regulations, including AML and KYC requirements.
• Legitimate interests: Processing is necessary for hzyz's legitimate business interests, such as fraud prevention and platform security, provided those interests are not overridden by your rights.
• Consent: For optional processing activities such as marketing communications, we rely on your explicit consent. You may withdraw consent at any time by contacting [email protected].

5 Data Sharing and Disclosure

hzyz does not sell, rent, or trade your personal data. We share data only in the limited circumstances described below, and only with parties who are contractually obligated to protect it.

• Payment processors: bKash, Nagad, and Rocket receive the minimum data necessary to process your transactions. These providers operate under their own privacy policies and are independently regulated.
• Identity verification providers: Third-party KYC service providers may receive your identity documents to complete the verification process. These providers are bound by strict data processing agreements.
• Regulatory and law enforcement authorities: hzyz may disclose personal data to government authorities or law enforcement agencies when required to do so by law, court order, or regulatory directive.
• Fraud prevention agencies: In cases of suspected fraud or money laundering, hzyz may share relevant data with fraud prevention organisations to protect the platform and its players.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer in advance.

6 Cookies and Tracking Technologies

hzyz uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse usage patterns. Here is how each type of cookie is used:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and display options. Disabling these may affect your experience on hzyz.
• Analytics cookies: Collect anonymised data about how players use the platform — which pages are visited most, where players drop off, and how long sessions last. This data helps hzyz improve the platform.
• Security cookies: Used to detect and prevent fraudulent login attempts and unusual account activity.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging in to your hzyz account. For full details on the cookies used, contact [email protected].

7 Data Retention

hzyz retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law.

• Active accounts: Personal data is retained for the full duration of your account's active status plus a minimum of five years after account closure, as required by AML regulations.
• Transaction records: Financial transaction records are retained for a minimum of seven years to comply with financial record-keeping requirements.
• Support communications: Chat logs and email correspondence are retained for three years from the date of the last interaction.
• Marketing data: If you have opted in to marketing communications, your contact details are retained until you opt out. Upon opt-out, marketing data is deleted within 30 days.
• Deleted accounts: When an account is closed at your request, personal data is anonymised or deleted within 90 days, except where retention is required by law.

8 Data Security

hzyz implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure.

• TLS encryption: All data in transit between your device and hzyz servers is encrypted using TLS 1.2 or higher.
• Encrypted storage: Personal data at rest is stored in encrypted databases. Encryption keys are managed separately from the data they protect.
• Access controls: Access to personal data is restricted to authorised hzyz personnel on a strict need-to-know basis. All access is logged and audited.
• Two-factor authentication: hzyz supports 2FA for all player accounts. We strongly recommend enabling 2FA to add an extra layer of protection to your account.
• Penetration testing: hzyz conducts regular security assessments and penetration tests to identify and address vulnerabilities before they can be exploited.
• Incident response: In the event of a data breach that affects your personal data, hzyz will notify you within 72 hours of becoming aware of the breach, in accordance with applicable data protection regulations.

9 Your Privacy Rights

As an hzyz player, you have the following rights regarding your personal data. To exercise any of these rights, contact [email protected] with your account details and a clear description of your request.

• Right of access: You can request a copy of all personal data hzyz holds about you. We will provide this within 30 days of receiving your request.
• Right to rectification: If any of your personal data is inaccurate or incomplete, you have the right to request that it be corrected. Update basic details directly in your account settings, or contact support for more complex corrections.
• Right to erasure: You can request that hzyz delete your personal data. This right is subject to legal retention requirements — for example, transaction records required by AML law cannot be deleted on request.
• Right to restrict processing: You can request that hzyz limit how your data is used while a dispute or correction request is being resolved.
• Right to data portability: You can request a copy of your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to object: You can object to the processing of your personal data for marketing purposes at any time. You can also object to processing based on legitimate interests, though this may affect your ability to use certain platform features.
• Right to withdraw consent: Where processing is based on your consent, you can withdraw that consent at any time without affecting the lawfulness of prior processing.

10 Children's Privacy

hzyz is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If you are under 18, you must not register an account or use the hzyz platform in any way.

If hzyz discovers that personal data has been collected from a person under 18, that account will be immediately closed, all associated funds will be returned to the registered payment method, and all personal data will be deleted from our systems within 30 days.

11 Third-Party Links

The hzyz platform may contain links to third-party websites or services, such as payment provider portals. These third-party sites operate under their own privacy policies, which hzyz has no control over.

hzyz is not responsible for the privacy practices of any third-party website. We recommend reviewing the privacy policy of any third-party site before providing personal information. The presence of a link on hzyz does not constitute an endorsement of that site's privacy practices.

12 Changes to This Privacy Policy

hzyz may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When material changes are made, we will notify registered players via the platform notification system or the email address on file at least 14 days before the changes take effect.

The effective date at the top of this page will always reflect the date of the most recent update. Continued use of the hzyz platform after the effective date of any changes constitutes acceptance of the updated Privacy Policy. If you do not agree with the updated policy, you must stop using the platform and request account closure.

We encourage you to review this Privacy Policy periodically to stay informed about how hzyz protects your personal data.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way hzyz handles your personal data, please get in touch through any of the following channels:

• Email: [email protected] — privacy-related requests are prioritised and responded to within 2 business hours during operating hours.
• Live Chat: Available 24/7 directly from the hzyz platform. Start a chat and select "Privacy & Data" from the topic menu.
• FAQ: Visit the hzyz FAQ page for answers to common questions about data and account management.

For formal data subject requests — such as access, erasure, or portability requests — please email [email protected] with the subject line "Data Request" and include your registered mobile number and account username so we can locate your records promptly.